Background In March 2025, cybersecurity researchers disclosed a highly sophisticated targeted attack campaign named "Operation ForumTroll." Orchestrated by an unidentified state-sponsored APT group, the operation leveraged a Google Chrome 0-day vulnerability (CVE-2025-2783) as its core weapon. This vulnerability enabled sandbox escape, allowing arbitrary code execution on victims' Windows systems and granting...
Blog
O que é Doxware? Veja como se proteger desse ataque
Este artigo é para quem se preocupa com a segurança dos dados corporativos. Se você já ouviu falar sobre ransomware, saiba que existe uma versão ainda mais perversa e invasiva: o doxware. Este tipo de ataque tem ganhado cada vez mais espaço entre os cibercriminosos e é essencial entender como...
Top Security Incidents of 2025: Lazarus Group’s Cryptocurrency Heist
Event Summary In February 2025, the North Korea-linked APT group Lazarus launched a highly sophisticated supply chain attack against the prominent cryptocurrency exchange Bybit, successfully stealing over 400,000 ETH and stETH—valued at approximately $1.5 billion. This incident marks the largest single security breach in the global cryptocurrency sector to date....
Top Security Incidents of 2025: The Emergence of the ChainedShark APT Group
In 2025, NSFOCUS Fuying Lab disclosed a new APT group targeting China’s scientific research sector, dubbed "ChainedShark" (tracking number: Actor240820). Been active since May 2024, the group’s operations are marked by high strategic coherence and technical sophistication. Its primary targets are professionals in Chinese universities and research institutions specializing in international...
OpenClaw Open Source AI Agent Application Attack Surface and Security Risk System Analysis
Background In early 2026, OpenClaw (formerly known as Clawdbot and Moltbot), an open-source autonomous AI agent project, quickly attracted global attention. As an automated intelligent application running in the form of a chatbot, it allows users to input natural language commands through Web pages and IM tools (such as Telegram,...
An Overview of 2025 Global APT Attack Landscape
In 2025, the global cybersecurity situation continued to deteriorate, with a significant rise in the use of 0-day vulnerabilities in Advanced Persistent Threat (APT) attacks, which became a key driver of accelerating threats. Numerous 0-day vulnerabilities were exploited in operating systems, browsers, network devices, and security software, enabling attackers to...
